ZeroDay Findings
Sign inSign up

Every 4 hours

Cyber

Keywords match titles. Record type separates incidents, intel, and research from CVEs.

  1. Research · Oct 16, 2026 · Security Affairs

    F5 Patches Critical RCE Vulnerabilities in NGINX

    F5 has released critical patches for multiple RCE vulnerabilities in NGINX that could be exploited without authentication, emphasizing the need for immediate updates.

    What changed

    F5 Networks has addressed several vulnerabilities in its NGINX product, including two critical remote code execution (RCE) flaws. These vulnerabilities, identified as CVE-2026-15176 and CVE-2026-93479, can be exploited by attackers without requiring authentication, posing significant risks to affected systems.

    • The vulnerabilities allow unauthorized access to execute arbitrary code.
    • Exploitation can occur through specially crafted HTTP requests.
    • F5 has released updates to mitigate these vulnerabilities.

    Who is affected

    Organizations utilizing F5's NGINX products are at risk due to these vulnerabilities. The following groups should prioritize applying the latest patches:

    1. Enterprises relying on NGINX for application delivery and security.

    • F5 NGINX Plus users.
    • F5 NGINX Open Source users.
    • Organizations using NGINX in cloud environments.

    What to do

    It is critical for affected organizations to take immediate action to secure their systems. F5 recommends updating to the latest version of NGINX to mitigate the risks associated with these vulnerabilities.

    Regularly review security advisories from F5 and implement patches as they become available.

    • Apply the latest patches for NGINX immediately.
    • Monitor systems for any unusual activity that may indicate exploitation attempts.
    • Review and enhance security policies related to web application firewalls.

    Original report

  2. Research · Oct 16, 2026 · The Record

    Anne Arundel County Confirms Data Breach Following Ransomware Incident

    Anne Arundel County, Maryland, has confirmed a data breach linked to a ransomware attack, with investigations underway to determine the extent of the data exposure.

    What changed

    Anne Arundel County officials have confirmed that a data breach occurred in August, resulting from a ransomware attack. An unauthorized intruder accessed and stole files from the county's government systems.

    The county is currently conducting a thorough investigation to assess the full scope of the data compromised during this incident.

    Who is affected

    The breach primarily impacts the residents and employees of Anne Arundel County, as sensitive government data may have been exposed. Additionally, the incident raises concerns for other local government entities that may face similar threats.

    The potential exposure of personal information could affect various stakeholders, including local businesses and community organizations relying on county services.

    • Residents of Anne Arundel County, Maryland
    • County government employees
    • Local businesses interacting with county systems
    • Community organizations dependent on county services

    What to do

    Residents and employees are advised to monitor their personal information closely for any signs of misuse. The county is expected to provide updates on the investigation and any necessary protective measures.

    Organizations should review their cybersecurity protocols and consider additional training for staff to prevent similar incidents in the future.

    • Monitor personal information for unusual activity
    • Stay informed through official county communications
    • Review and enhance cybersecurity measures
    • Consider staff training on data protection and incident response

    Original report